[OFBIZ-11349] The "stream" request-map in ecommerce and commonext controllers requires authentication

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Release Branch 18.12, Release Branch 17.12, Trunk
• Fix Version/s: 17.12.01, 18.12.01
• Component/s: commonext, ecommerce
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 13/Feb/20 06:00
• Updated: 19/Feb/20 13:14
• Resolved: 19/Feb/20 13:12

Description

For security reason, the "stream" request-map

1. in ecommerce controller have been temporarily commented out.
2. in commonext controller has been changed to require authentication.

We will need to

1. put back the functionnalities allowed by the "stream" request-map in ecommerce .
2. later check that mandatory authentication in commonext controller no impact.

Eventually it turned out that we simply needed to require authentication in both cases (back and front ends). Because in ecommerce/ecomseo webapps the stream request is only used to post images in blog entries an you need to be logged in to do so.

Issue Links

• is related to: OFBIZ-11348 Temporarily comment out the "stream" request-map in ecommerce controller for security reason
• relates to: OFBIZ-11353 For security reason require authenticationfor the "stream" request-map in commonext controller.xml